Endpoint Protection

 View Only
  • 1.  Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 12, 2009 03:25 PM
    I am currently using Symantec Enterprise AV v10.x      I have recently upgraded some clients that used to be on AV 10.x to SEP v11.x and I thought they would automatically get removed from the System Center but that does not seem to be the case.   I see the client now appears in SEPM console which is what I want but it still appears also in the SCS as well.  

    I deleted the client in the SCS and did a "Clear Cache" and then an "Intense Discovery" but within a few minutes the same client that I deleted earlier reappeared again. 

    How to I get this client from permanently reappearing in the Symantec System Console?

    Capt.


  • 2.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 12, 2009 03:32 PM
    On the SAV server
     backup your registry first

    then go to

    hkey_local_machine\software\intel\landesk\virusprotect6\currentversion\Clients

    Check if the client is listed if yes then delete the client




  • 3.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 12, 2009 03:59 PM
    Vikram,

    I did as you asked and deleted those clients from the Registry.  I then did a "Discovery" again and funny thing the same deleted clients reappeared again. 

    Did I do something wrong?

    Capt.



  • 4.  RE: Why when I delete clients in Symantec System Center they keep reappearing?
    Best Answer



  • 5.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 12, 2009 11:53 PM
    According to my knowledge Discovery is for server not  for client.

    Client information is shown from the registry key hkey_local_machine\software\intel\landesk\virusprotect6\currentversion\Clients
    When a client connects to SAV server it creates a new entry in the above mentioned key.

    You can reduce the time out value so that clients will be deleted.
    If the client doesnt exists it will be deleted from console...

    Reg Path
    HKEY_LOCAL_MACHINE\SOFTWARE\Intel\LANDesk\VirusProtect6\CurrentVersion

    Value Name (Decimal)
    ClientExpirationTimeout

    Default Value is 720
    (720 Hrs - 30 Days)
    REF:
    http://service1.symantec.com/support/ent-security.nsf/docid/2000070511575548

    How many servers you have in your setup.
    If the client is in some other server then you may have to delete it from other server's registry...


  • 6.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 27, 2009 09:43 AM
    We have 500 clients that I converted from SAV to SEP which like I said keep reappearing in the SAV console.  The good news is that appear correctly int eh SEPm console as they should.


  • 7.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Nov 27, 2009 10:06 AM
    can you check the Check In time of your clients in SSC? are they current...
    Try doing a discovery service ( its for servers )
    but give it a try and check if you  are still seeing clients.
    in the SSC...


  • 8.  RE: Why when I delete clients in Symantec System Center they keep reappearing?

    Posted Jan 12, 2010 08:21 AM
    Our SAV clients are also still showing up in SAV - wanted a nice way to remove all and see if any proper SAV clients (i.e the ones not migrated yet) re-appear.

    Our SAV clients should get smaller while seeing them in SEP.

    Hmm, anyway to get SAV to report clients after SAV > SEP install?